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Abstract 

We compute the averages over elliptic curves of the constants occurring 
in the Lang- Trotter conjecture, the Koblitz conjecture, and the cyclicity 
conjecture. The results obtained confirm the consistency of these conjec- 
tures with the corresponding "theorems on average" obtained recently by 
various authors. 



1 Introduction 

Let E be an elliptic curve defined over the rational numbers and for a prime p 
of good reduction for E, let E p denote the reduction of E modulo p. There are 
various conjectured asymptotics for functions which count good primes p up to 
x for which the reduced curve E p has certain properties. In this paper we will 
focus on three such questions, although our methods are applicable to a wider 
range of problems. For a fixed integer r, let 

^E,r( x ) = \{p < x : p\ A E , a p (E) = r}\, 

where a p (E) = p + 1 — \E p (JE/p7,)\ is the trace of the Frobenius endomorphism 
of E at p. Lang and Trotter (T3], using a probabilistic model consistent with 
the Chebotarev density theorem and the Sato- Tate conjecture, predicted an 
asymptotic for TTE,r(%)' 

Conjecture 1. (Lang-Trotter) Assume that either E has no complex multipli- 
cation or that r ^ 0. Then 

TtE r(x) ~ Ce rT^—— X — > 00, 

log 2 

where Ce.t is a specific constant. 

We will describe the constant Ce,t in detail in section [3] The second con- 
jecture we will consider involves the counting function 

7T£, prime (z) := | {p < x : p \ A E , \E(Z/pZ)\ is prime }|. 



1 



Conjecture 2. (Koblitz) 

(log ar) 



^ E ,primei,x) ^ Ce, prime \2 ^ ^ * 



where Ce, prime is a specific constant. 

Finally we will consider the cyclicity conjecture, which has been settled 
conditionally by Serre [T7] and unconditionally in the CM case by Murty [T3J 
and also by Cojocaru [JJ. Let 

^cyclic (ie) := \{p < x : p\ A E , E(Z/pZ) is a cyclic group }|. 

Conjecture 3. (Cyclicity conjecture) 



KE,cyclic{x) ~ Ce. cyclic-, OS X > OO , 

log a; 



where Ce, cyclic is a specific constant. 



Recently, various authors have proven that these conjectures "hold on av- 
erage over elliptic curves." More precisely, for parameters A = A(x) and 
B = B(x) 7 let C — C(x) denote the set of elliptic curves Y 2 = X 3 + aX + b with 
(a, b) e ([-A, A] x [-B,B]) n Z 2 . Fouvry and Murty 8 (in case r = 0) and 
later David and Pappalardi [5] (in case r ^ 0) proved Conjecture [T] on average: 
for any e > 0, if min{A(x), B(x)} > x 1+£ then 

T777-T7 Y] n E ,r(x) ~ C r -^-, as X ► oo , (1) 
\C(x)\ ' s logcc 

where C r is a specific constant. S. Baier [JJ has recently shortened the length 
of the average, replacing with "a; 3 / 4 + e ." 

Balog, Cojocaru and David [2] have proved a similar average theorem for 
Conjecture^] for any e > 0, if min{A(x), -B(ir)} > x 1+£ then 

, n , \ I / . prime (a;) ~ C pr i me — r», *S I -> OO, (2) 

|C(x)|^ } (log a;) 2 

where C pr i mo is a specific constant. 

Finally, Banks and Shparlinski 3^ have proved Conjecture [3] unconditionally 
on average: for any e > 0, if x 2 / 3+e < A(x), B(x) < x 1 ~ e then 

TTTTTT ^ 7TB. cyclic (a;) ~ C cyc i ic - , as x -> oo, (3) 

C i ^-f K ' logo: 

where C cyc n c is a specific constant. 

In this paper we will prove that each of these average results is consistent 
with the corresponding conjectured result on the level of the constants. We will 
make the notation uniform. 
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Notation 4. Throughout the rest of this paper, let C'e denote any one of the 
constants Ce,t, CE, P rime, or Ce, cyclic, and let C denote the corresponding av- 
erage constant C r , C prime , or Ce, cyclic- 

Our first theorem is conditional upon an affirmative answer to the following 
question of Serre [IB]- In its statement, Q(E[p\) denotes the p-th division field 
of E, i.e. the field obtained by adjoining to Q the x and y-coordinates of a given 
Weierstrass model of E. 

Question 5. Does there exist an absolute constant c so that, for any prime 
p > c and any elliptic curve E over Q one has 

Gal(Q(E{p])/Q) ~ GL 2 (Z/pZ)7 

We prove 

Theorem 6. Assume that Question^ has an affirmative answer. Then for any 
positive integer k and any e > 0, we have 

1 ^\r> n\* ^ \(AnogB\^ log 3fe+7 (A 3 + B 2 



\c\e7c e \\ B ) ' v^hab} y 

Note the following 

Corollary 7. Provided that Question\5\has an affirmative answer and that, for 

l/2-g 

some e > 0, A e <C B <C e A 3+7 , then as A — > oo, one has 

p Ce — C 
1 1 Eec 

Taking k = 2, we also note the following corollary to Theorem 1.4 of [6], 
which bounds the average error in the Lang- Trotter conjecture. 

Corollary 8. Let e > and c > be given and suppose that Question\5\has an 
affirmative answer. Then, provided that A, B > x 2+£ and that 

'A e logBY log 6+7 (A 3 + B 2 )\ ^ 1 



one has 



\C\ ^ 

1 1 EGC 



B J ' ^/min-fA, B} j ' (logx) 
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log a; 



(logx) 



Unconditionally, we prove a statement about averages over Serre curves (we 
will review the notion of a Serre curve in Section [J). 

Theorem 9. Let k be a positive integer. For each e > 0, we have 

I I \ / 

E is a Serre curve 
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Because of the fact that 

Pi £ 1 ^ 1 

E is a Serre curve 

as mm{A, B} — > oo (c.f. [ID]), Theorem [9] provides evidence that Theorem [6] 
should hold unconditionally. 
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3 The constants 

In this section we will describe precisely the constants occuring in the conjectures 
under consideration, as well as the corresponding average constants. Their 
description involves the division fields of E, whose notation we now fix. 

Notation 10. For each positive integer n, denote by Q(E[n\) the n-th division 
field of E, obtained by adjoining to Q the x and y- coordinates of the n-torsion 
of E, and by 

G n (E) := Gal(Q(E[n])/Q) 

the associated Galois group. Since E[n] is a free Z / ' nL-module of rank 2, we 
may (by fixing a IjnL-basis) view G n {E) as a subgroup of GLiifLjnlf). 

We will distinguish between the case where E has complex multiplication 
(CM) and the case where E does not (non-CM). Since almost all elliptic curves 
are non-CM [7], our only interest in the CM case is to obtain upper bounds for 
Ce- 



3.1 The CM case 

Suppose that E has complex multiplication by an order O in an imaginary 
quadratic field K . Let w be the number of roots of unity in K and Ak the 
discriminant of K. 

Then, as computed in [13l pp. 87-88], we have 



c - nnii^ n - (< _ 1) v_w )) j ■ 

e\A K i\& K i\a k 

£\r l\r 

(4) 

The factor Fi(r, K) is not relevant to our discussion, and we mention only that, 
uniformly in r and K, one has K)\ < 4. 
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To write the Koblitz constant [12] , we define, for any positive integer n, the 
subset 

$» := {g G GL 2 (Z/nZ) : det(l - g) S (Z/nZ)*}. (5) 

Then we have 

^B.primc - _[! 1-1// 

Note that (c.f. [5J Proposition 3.10]) one has 

n \G t (E)n* t \/\G t (E)\ tt A vm ^ 2 -^-l \ 

OK,pnmo- H ^jy^ H I X W (£ - X (£))(£ - 1)2 J ' 

where \ is the quadratic character corresponding to the quadratic field K. 

Finally, the cyclicity constant has the same definition on the CM and non- 
CM case, namely 

O^cydic - [Q(E[n]) : Q}' W 

3.2 The non-CM case and the average constants 

In each non-CM case, we will write constant Ce in the form 

C E = f(m E ,G mB (E)) ■ J] f(£,GL 2 (Z/£Z)), 

where /(n, G) is some function of the level n and the subgroup G < GL 2 (Z/nZ), 
and where wie is a positive integer depending on the torsion representation 
attached to E. We proceed to describe the- 

Another way to phrase Notation [Till is to say that there is a group homomor- 
phism 

<PE,n ■ Gq — > GL 2 (Z/nZ), 

defined by letting the absolute Galois group Gq := Gal (Q/Q) act on the n- 
torsion points of E, and we are denoting the image of (fE,n by G n {E). Taking 
the inverse limit of the tfE,n 

over positive integers n (ordered by divisibility), 
one obtains a continuous group homomorphism 

'-Pe '■ Gq > GL 2 {±). 

(Here Z := hm<_Z/7iZ = Y\ p Z p .) Serre [16] showed that, when E has no 
complex multiplication, the image of this representation is open, i.e. that 

[GL 2 {±) : <p E (G®)} < oo. 

Equivalcntly, there is some positive integer level so that, if 

tt : GL 2 (Z) -► GL 2 (Z/m E Z) 
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is the natural projection, one has 

V E (G Q ) = ir- 1 (G mE (E)). (7) 

For a non-CM curve E over Q, let us denote by hie the smallest positive integer 
such that the above equation holds. In particular, vtle has the property that, 
for mi dividing the and m 2 coprime to one has 

{E) ~ G mi (E) x GL 2 (Z/m 2 Z) . (8) 

In order to write the Lang- Trotter constant Ce.t, we follow the notation in 
[13] : for G C GL2(Z/nZ) any subgroup, let 

G r := {j £ G : tr^ = r mod n}. 

Then, 

= 2 m g |G mE (£) r | n l|GL 2 (Z/lZ) r | 
E ' r tt' |G mB (£)| 11 |GL 2 (Z/*Z)| 

£fm E 

2 m g |G rog (£;) r .| r,/ _J_\ tt/ 1 \ 

tt" \G mE {E)\ • LL\ l + p-l)' \L\ (£-i)(P-i)J> 



where m E is as in ([7]). On the other hand, the average constant in |T]) is 

., I'" — ' 

t\r t\r 



(<-!)«" -1) 



The Koblitz constant (as refined by Zywina in [19] ) is given by 
r _ \G mE (E)n<S> mE \/\G mE (E)\ , , |GL 2 (Z/ffl)n$,|/|GL 2 (Z/«)| 



rw 1 - 1 /^) i x E (i-i/fl 

|G mE (£)n$ mB |/|G mE (£;)| j-j ^ ^ 2 -£-i 



In this case the average constant in ^ is given by 

£ 2 - I - 1 



Cprimc — J^J f 1 



(I- l) 3 (^+l) 

Finally, the cyclicity constant is given by 

<w = g ^ = r e ^| J • n (i - ^-d^+d) • 
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the second equality coming from §8§ and the fact that any square-free integer 
k may be decomposed as k — k\ ■ ki, where k\ \ vtle and $2, the) = 1- The 
average constant in © is 

Ccyclic J^Jf 



£{£- 1) 2 (£ + 1) 

We first note that if any non-CM elliptic curve E were to satisfy = 1 
(i.e. if ifE were surjective), then we would have Ce = C. However, as observed 
by Serre, no elliptic curve over Q has the = 1- The main difficulty in proving 
Theorem [5] is tracking the variation of with E. To prove the theorem, we 
will focus on a density one subset of curves E for which tue is essentially equal 
to the square-free part of the discriminant of E. These curves are called Serre 
curves and will be discussed in detail in the next section. 

The proof of Theorem [5] will proceed as follows. We will decompose the sum 



Y,\c E -c\ k = Yl \c E -c\ k + Yl \c E -cf 

EtEC EtC 

E is a Serre curve E is not . 

In Section we will show that, for each e > 0, one has 



1 /l n(J R\ k/(k+l) 



EtC 

E is a Serrc curve 



proving Theorem [21 In Section [5] we will show that, assuming an affirmative 
answer to Question [5l one has 

£ p.-cf « *~*^*+*> 



|C| £j vSill - 

E is not a Serre curve 



concluding the proof of Theorem [6] 



4 Serre curves 

Serre |16j observed that although the torsion representation ipE has finite index 
in GL2CZ), it is never surjective when the base field is Q. For each elliptic curve 
E over Q, there is an index two subgroup He Q GL 2 (Z) with <Pe(Gq) Q He- 
(We will presently describe this subgoup.) 

Definition 11. An elliptic curve E over Q is a Serre curve if <pe(Gq) = He- 

In other words, a Serre curve is an elliptic curve whose torsion representation 
has image which is "as large as possible." 

We now describe the subgroup He- Let A = denote the discriminant 
of E and A s f its square-free part, i.e. A s ^ is the unique square-free integer so 
that 
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The subgroup He will be the full preimage under the canonical surjection 

7T : GL 2 (Z) -» GL 2 (Z/MZ) 

of a particular index two subgroup of GL 2 (Z/MZ) for a certain level M. If 
A s / = 1, then every element of G 2 (E) must be an even permutation, where 
we embed G 2 (E) into the symmetric group S3 by representing it on the non- 
identity 2-torsion points. In this case M = 2 and we take He to be w~ 1 (A3), 
where A 3 is the alternating group. Otherwise, the quadratic field Q(v / A), being 
a non-trivial abelian extension of Q, is contained in a cyclotomic extension. Let 
D E be the smallest positive integer for which 



q(Va) cq(( De ). 



In fact, 

Dm = 



\A sf {E)\ \fA sf {E) = l mod 4 
4|A S /(£')| otherwise 

where A s f(E) is the squarefree part of the discriminant of E. Then we define 



M [2|A s/ (i?)| ifA a/ (25) = l mod 4 
E [4\A sf (E)\ otherwise 

to be the least common multiple of 2 and De, so that Q(E[Me]) is the com- 
positum of Q(E[2]) and Q(E[D E \). Since 

Q(y/A)cq(E[2])nQ{E[D E }), 

the corresponding Galois group Gm e (E) '■= Gsl\(Q(E[Me} ) /Q) must be a proper 
subgroup of GL 2 (Z/MeZ). In particular, the character on GL 2 (Z/MeZ) which 
describes the action on \/A of an element considering the tower of fields 

Q(\/A) C Q(Cu E ) C Q(E[M E }) 

is given by 

.:VA^(%^VA. 
\ dct a J 

On the other hand, the inclusion 

Q(VA) C Q{E[2)) C Q(E[M E }) 
demands that for each a € Gm e (E), 

a : \/~A s(a)V~A, 

where e denotes the projection GL 2 {Z/M E Z) — » GL 2 (Z/2Z) followed by the 
signature on GL 2 (Z/2Z) ~ S 3 . Thus we see that, with the notation as defined, 

G Me (E) C ker (e{-) (^y)) ^ GL 2 (Z/M E Z). (10) 
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In this case we therefore make the definition 

'A s /(£) 



Hf 



n- 1 (ker (e{-) (- 



det(-) 



Note that Mjg always divides the, and if we interpret ( ^ctff ) 1° ^ e ^ ne trivial 
character in case A s / = 1, we have 

E is a Serre curve ^==> tue = Me and Gm e (E) = ker ( e( ^ 1 



det(-) 

(11) 

One shows easily that, for d a proper divisor of Me and tt denoting the natural 
projection GLi^LIMeT^) — * GL2(Z/eK), one has 

-( ker ( £ -(w)))^ GL2(z/dz) - 

Thus in particular, when E is a Serre curve and d \ Me, one has 

, . f ker (W4r#r^ if <2 = Afe , . 

G? d (£;) = { v v dct () & (12) 

[GL2(Z/dZ) otherwise. 

5 The average over Serre curves 

We will now show that for each e > 0, one has 

1 /!„„ d\ fe/(fe+i) 

w\ £ ' (13) 

E is a Serre curve 

5.1 The constants associated to Serre curves 

In this section, we will explicitly compute the constants Ce,t, Ce, prime and 
Ge, cyclic for E a Serre curve. For the Lang- Trotter constant Ce,t, we must fix 
some notation. First define the exponent k € {1,2,3} and the odd integer W 

by 

{1 if A s/ = 1 mod 4 
2 if A sf = 3 mod 4 
3 if A s / = 2 mod 4. 

In other words, we have 

M E =: 2 fe • W, (14) 
where Mb is as in When 2 fe_1 divides r, we further define the symbol 
5(A sf ,r)e{±l} by 



*(A. />r ) :=(-i r (^) + ^ + ^. X4 (_^/) 
where we make the convention that X4(x) = 1 if x ^ Z. 



(15) 
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Proposition 12. Suppose that E is an elliptic curve over Q which is a Serre 
curve. Then 

^-t&m?) <r*-ir (16) 

otherwise, 





1 Cf 


@E y prirne ' 


(r 

^ prime 
K C prime 


and 




c J 

^ E .cyclic — ^ 


r c cyclic 

v ^ cyclic 



(l + n p |A 3/ p3- 2p i- y +3 ) */ A ^ sl m0d4 

ot/ierwise 



,(lSj/fl)|-i) ) mod 4 

o£/ierwrase 



(17) 



(18) 



The proof of the proposition will require the use of some technical lemmas. 
We now describe the set-up of the first of these lemmas. Let M be any positive 
integer and recall the isomorphism of the Chinese remainder theorem: 

GL 2 {Z/MZ)~ J! GL 2 (Z/p k Z), x i-> (x pk ) (19) 

p k \\M 

Suppose that Xm Q GL 2 (Z/MZ) is any subset which, under (fH))) , satisfies 

^ m ~ IT 

p fc ||M 

where X p jc denotes the projection of Xm onto the p fc -th factor. Suppose further 
that, for each prime p dividing M we have a group homomorphism 

Vy : GL 2 (Z/p k Z) — > {±1}, 

and write 

ipM :GLi{Z/MZ) — ► {±1}, iPm(x) ■= JJ_ ip p k(x p k). 

p k \\M 

Lemma 13. With notation as just outlined, we have 

\^ M \±i) n x M \ = 1 I \x M \ ± (1^(1) ni pl |- IV^C-i) n x p * |) J . 

Proof. We begin by noting that 

\i> M \±i)nx M \ II jvy^n^ 

(Sp)p|jU p fe ||M 

risp=±i 
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where 
Fi(p k ) 



and F- 



Here our notation is meant to indicate that the sum runs over all w(Af )-tuples 
( s p)p\m °f ±l's which satisfy HpiM s p ~ Expanding the product and re- 
versing summation, we obtain 



A I 



e n^> & ) 

{tp)p\M P k \\M 



( 


f 




\ 




n 


Sp 




( s p)pIm 

\n«P=±i 


1 p|M 
\t„=-l 


) 


) 



(20) 



where now (t p ) runs over a/Z w(M)-tuples of ±l's. Now we show that, for all 
tuples (t p ) except (t p ) £ {(1, 1, . . . , 1), (—1, —1, . . . , —1)}, the innermost sum is 
equal to zero. For suppose that 

{p : p | M,t p = 1} + ± {p : p | M.t,, = -1}, 

and fix a prime p\ with t pi = 1 and a prime p 2 with t P2 = — 1. For a tuple (s p ), 
define its dual (s p ) by 



■^pi 



'Pl > °P2 



and s p = s p (p (£ {pi,p 2 })- 



Noting that 



n%=n 

p|M p|M 



Sp and 



n n 



s p = 0, 



p|M 
t„=-l 



p|M 
i„=-l 



we see that, except when S {(1, 1, . . . , 1), (—1, —1, . . . , —1)}, the innermost 
sum in (|20p vanishes. Thus, 



\^(±i)nx M \ 



= \[ n F ^ k ) ± n F -ib fe )j . 

\p fe ||M p k \\M J 



proving the lemma. 

Proof of (fl6|) . If E is a non-CM curve then 
Ce,t _ fnE\G mE [E) r \ 



□ 



C , - 



n 



\GL 2 (Z/a)\ 



\G mE (E)\ 11 ^|GL 2 (Z/«) r |' 



Thus, when is a Serre curve, we use <pTT]> and Ull) to write 



Ce.t 



2 k W 



(ker(e- (^y))) | |GL 2 (Z/2 fc Z) r | |GL 2 (Z/2Z)| 



C r 2W |Gi 2 (Z/Mi5Z) r | |GL 2 (Z/2Z) r | |GL 2 (Z/2 fc Z)| ' 

Now we use the following corollary of Lemma [17] below. 
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Corollary 14. For k E {1,2,3}, we have 
|GL 2 (Z/2 fe Z) r | 



2 3k 1 if r is even 
2 3k - 2 if r is odd. 

4fc-3 



The corollary, together with |GL 2 (Z/2 fe Z)| = 3 • 2 4fe -' j , implies that 



To evaluate 



^ker (e 



ii p k(a) := < 



\det( 

£ (a) 

X 4 (detCT)e(o-) 
Xs(detCT)£(cr) 



|GL 2 (Z/M £ Z) r | 
we will apply Lemma [T3l with M = Me and 



if p is 


odd 






if p fc = 


= 2 and A s / 


= 1 


mod 4 


if p k - 


= 4 and A s j 


= 3 


mod 4 


if p k - 


= 8 and A s f 


= 2 


mod 8 


if p fc = 


- 8 and A s f 


= 6 


mod 8 



Note that we then have e ■ ^ dct°( J ) ) = Ilp*||AfB ^p fc (')- Thus, by Lemma fT3l we 
have 

1+ \GL 2 (Z/M E Z) r \ 



C r 



(22) 



Vv(!)r ~ 1p p k(-l) r 



Lemma 15. For odd primes p, one has 

(-f)p(p- 1 ) ifp\ r 
ifp\r. 

Proof of Lemma \Th\ For r and d modulo p, it is straightforward to show that 

V -4tf 



\{g G GL 2 (Z/pZ) : trg = r, det.g = d}| = p \p + 
Thus, partitioning ip~ 1 (±l) r by determinant shows that 



(l)=±l 

To evaluate this sum we use the following corollary of 11, Lemma 6] . 
Sublemma 16. For r nonzero modulo p, 

(f)=±i 



(23) 
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(^) 


-<t) 







while if r = mod p then 

E 

Inserting this into (|23|) . we finish the proof of Lemma IT5l □ 

For p = 2, we use the following lemma, whose proof is a straightforward 
calculation which we omit. 

Lemma 17. If A s f = 1 mod 4 then 

X (l)o| = 1, l^2 _1 (-l)o| = 3, |V^^ 1 (l)i| = 2, and |^ x (-l)i| = 0. 

J/ A s f = 3 mod 4 then 

IV^Wol - IC 1 (-1)2| - 12, |-0r X (— l)o| = 1^4 = 20, 
and /or any odd r modulo 4, 

|V4 _1 (±l)r| = 8. 

If A s f = 2 mod 4 i/ien 



l^ X (±l)r| 



16-8 if r = 2 mod 4 
16-4 if r is odd. 



while 



and 



\i>sHi)o\ = l^ 1 (-i) 4 | = 



16-9 if A sf = 2 mod 8 
16-7 if A s f = 6 mod 8 



Corollary 18. For ip 2 k as * n (ED); we have 

^2*(l)r - V'2*(-l)r = 



16-7 i/ A s/ = 2 mod 8 
16-9 if A sf = 6 mod 8. 



-{-iy/* K - X4(-A s/ /2) • 2 2fc -! 2 fc ~! | r 
otherwise, 



where here we use the convention that Xi( x ) = 1 if x is not an integer. 

Inserting the results of Corollary [TSl and Lemma fT5l into (j22|) . we finish the 
proof of Jill). □ 
Having proved (JTSJ) , we now proceed to 
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Proof of (|17[) . This computation may also be found in [19] . For any non-CM 
elliptic curve E, we have 

C primc \G mE (E)\ fl ^ |^| 



If E is a Serre curve, then we have 

2Ub7} m n *».rJ 

(24) 



, prime 

21^(1)0^1 



Cprimo I^MeI 

Applying Lemma [T3l we find that 

\^m e (i) n *a/ e | = \[ I + n (l^W n V I - l^(-i) n V l) 

Lemma 19. For p odd, one has 

\<P p \=p(p 3 -2p 2 -p + 3) 

and 

Proof of Lemma \19[ The lemma follows immediately from 

^(±1)0^1 = l-p(p 3 -2p 2 -p + 3±l). 



□ 



The following lemma is a straightforward calculation using the fact that 

=£" 1 (1). 

Lemma 20. One has 



2 if k = 1 

i//ce{2,3}. 



Inserting the results of Lemmas [11] and HOI into (|2"4"j) , we finish the proof of 

mi). □ 

Proo/ of {HI). We have 

M(fc) 

L^B, cyclic _ 



'fclmjs |G fc (E)| 



C C y C li c TT ( 1 1 

lle\m E y 1 \GL 2 (Z/0,)\ 
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If E is a Serre curve then itie = Me- Note that Me is square- free if and only 
if A s f(E) = 1 mod 4. Thus, if E is a Serre curve, we deduce from (| 1 2[) that 

ifA s/ = l mod 4 

otherwise. 

This proves (JTHD - □ 

We have now proved (fl6|) . (flTf . and (fT8| . finishing the proof of the Propo- 
sition [T21 

5.2 Averaging the Serre curve constants. 

Considering Proposition Q21 we see that when E is a Serre curve, Ce has the 
form 

C E = C(l + g(A sf (E))) where g(A sf (E)) « ^j^y- 

Since the discriminant of the curve F 2 = X 3 + aX + b is — 16(4o 3 + 27b 2 ), the 
result (fTS)) will follow from 

1 1 /logB\ ' C/ ' ( ' c+1 ) 

Jab ^ a pwwp <<£ ^ ' \~b~) • (25) 

|6|<B 
4a 3 +27f>Vo 

Let Z be a positive real number to be chosen later. Since the left hand side is 
bounded by 

£ 1 + Jar E 



4AB ^ 4AB ^ Z kl 

\a\<A H<A 
\b\<B \b\<B 

4a 3 +27&V() \(4a 3 +27b 2 ) Bf \>Z 
|(4a 3 +276 2 ) s/ |<Z 

we are reduced to proving the following lemma. 
Lemma 21. For any e > 0, we /icrae 

J2 1 <e log£-Z-A 1+e . (26) 

\a\<A 
\b\<B 
4a 3 +27b 2 ^0 
|(4a 3 +27b 2 ) a/ |<Z 

Proof. The proof boils down to counting ideals of bounded norm in various 
quadratic fields. I would like to thank R. Daileda for helpful discussions re- 
garding this viewpoint. We wish to count the number of integer pairs (a, b) £ 
[—A, A] x [-B, B] which satisfy the equation 

4a 3 + 27b 2 = dy 2 , 
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where y and d are integers with d ^ square-free and \d\ < Z . Re- writing this 
equation as 

x 2 - By 2 = 12(-a) 3 , 
where x — 9b and D — 3d, we see that the left hand side of (|26p is bounded by 

]T }2 e (°Q(^D)) 2 ■■ a -a = 12a 3 , a + a<l8B}, (27) 

2<\D\<3Z l<|o|<i4 
D squarc-frcc 

where Cq(^d) denotes the ring of integers of Q(\/ r D). We will presently trans- 
form this into counting principal ideals rather than elements up to conjugation, 
but in the real quadratic case we must worry about the presence of an infinite 

unit group. Suppose that (a, a) € (^q(VZ>)) * s a conjugate pair satisfying 
a-a = 12a 3 and la + a\ < 18B. 



Writing a = r + s\ D, we may assume that r and s have the same sign. Any 
other P £ Qq^Sd) which generates the same ideal as a is of the form [3 = a ■ e^,, 
where £d is a fundamental unit. One can show that the number of integers n 
for which 

\a-el+a-eB n \ < 18B 



is <C logS, with an absolute constant. Thus, (f27j) is bounded by a constant 
times 

logB- Yl 12 7 /D inC ( 12 « 3 ) < logS- ]T VD(l2a 3 ), 

2<\D\<3Z l<a<A 2<\D\<3Z l<a<A 

D squarc-frcc D square-free 

where ^(m) (resp. VD^i 171 )) * s the number of integral ideals (resp. the number 
of principal ideals) in the ring Cq(^/tj) of norm equal to m. We will now show 
that 

IdH < r(m). (28) 
To see this, note that the set of integral ideals / of CVjCa/dI °^ norm m is exactly 



{ n ; - n (p° Q (v^)) Qp/2 - n ^ 

p a P||m p a P\\m p a P\\rn 

p split p inert p ramified 

where ^3 denotes a prime ideal lying over p and < i < a p . The number of 
such choices is 

{rip Q P||m( Q; P + 1 ) if P inert ^ 2 I a P' 
p split 
otherwise. 
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From this, (|28p is immediate. Noting that r(m) <C e m £ , one sees that 



logB- £ Yl VD(l2a 3 ) « £ logB-Z-A^, 

2<|D|<3Z l<a<A 
_D squarc-frcc 

finishing the proof of Lemma [2T] □ 
Finally, using Z = (B/(A e log , (gSJ follows, and thus so does (HHD ■ 

6 The average over non-Serre curves 

We finally turn to proving that 

1 V \C C\ k « 1 °g 3fc+7 (- 43 + i?2 ) (29) 

S is not a Scrre curve 

In the case of the cyclicity constant, one has 

Ce, cyclic 5: 1, 

since the constant is a density. For the other constants, we prove the following. 

Lemma 22. Fix the integer r£Z. If E over Q is an elliptic curve with CM, 
then 

C E ,r = 0(1) and C E , prime = 0(log(A B )). 
If E is a non- CM elliptic curve over Q, i/ien we /iawe 

CE,prime = 0(\ogm E )- 

Assuming an affirmative answer to Question^ we have 

C E , r = 0(log 3 m E )- 
Proof. For the Lang- Trotter constant in the CM case, we see from (|4]) that 

c E ,r « n f 1 + jh) • n f 1 + j^) « io s a * • ^ 

£^2 V 7 £^2 V 7 

£|A/f e\A K 

l\r 

by Merten's theorem. For fixed r and using the fact (c.f. [18]) that, since E 
is defined over Q, K must have class number one, we conclude that C E ,r is 
uniformly bounded. 

For Ce.t in the non-CM case, we reason as follows. According to [9], we 
may take tue to be of the form 



m E 



\\ P a " ■ J| P a " =■ mi ■ m 2 , 



pG{2,3,5} or p\A E 
G(p)CGL 2 (Z/pZ) p£{2,3,5} and 

G(p)=GL 2 (Z/pZ) 
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where a p are certain exponents, independent of E. If Question [5] has an affir- 
mative answer then mi is uniformly bounded, and there must be a non-trivial 
intersection 

QCQ(%i])nQ(£[m 2 ]) =:F, 
whose Galois group we will denote by H: 

H := Gal(F/Q). 

The restriction of an automorphism to the subfield F defines group homomor- 
phisms 

X : G(m x ) — » H, ij, : G(m 2 ) — > if, 
and the Galois group of the m^-th division field may be identified as 

Gal(Q(E[m E )/Q) = {(n,r 2 ) G G(mi)xG(m 2 ) : x(n) = ^(r 2 )} - kerx^V" 1 - 

Because of basic facts about the group GL 2 (Z p ) (c.f. [TS]) one has G(m 2 ) = 
GL 2 (Z/m 2 Z). As observed in [TS], the common quotient H of G{m\) and 
GL 2 (Z/m 2 Z) must be abelian, and since the commutator subgroup of GL 2 (Z/m 2 Z) 
is equal to SX 2 (Z/m 2 Z), we see that tjj — 6 o dct for some homomorphism 

5 : (Z/m 2 Z)* ► if. 

Considering the decomposition 

G(m B ) r - (ker X ® V _1 ) r = |J X~\h) r x dct - 1 (r 1 ^)) r , 

heH 

we are led to 

Lemma 23. -Fza; any odd prime power p n and integers r G Z/p n Z and d € 
(Z/p n Z)*. TTien we /law 

e M 2x2 (Z/p n Z) : fr-(A) = r, det(A) = d}| < p 2n (l + - 

Proof of LemmaWth In fact, we will evaluate the left-hand side explicitly. Writ- 
ing 

r 2 -Ad-. A=:p d - A', 
where p \ A', we will show that 

\{A G M 2x2 (Z/p"Z) : tr (A) = r, det(A) = d}\ = p 2n (l + - + f(p, A) 

V P 

(30) 

where 

(-p-("+i)/2 if <5 = n is odd 

_p-(n+2)/2 if <5 = n is even 

_ (p-(«+l)/2 + p -(*+3)/2) if J < n> 2 | 5 

((*£) (5 + 2 - i±l) + 5 - i±l) p-CW) if <y < n, 2 I <y, 



/(P,A) := ^ 
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where f^J denotes the Legendre symbol. Lemma [231 follows upon observing 
that 

2 



p j \ p j p 



< 
p' 



which can be proved by using elementary calculus techniques to bound the 
function 

V»p- -^TTJ2 + ^ (W e [1, oo)) . 
To prove ([30]) . we reason as follows. Writing a matrix of trace r as 

A=( a b 
V c r — a 

we are led to ask how many solutions (a, 6, c) modulo p™ there are to the equation 

nrodp", (31) 

which leads us to the following two sublemmas, whose proofs are straightforward 
calculations. 

Sublemma 24. For any odd prime power p n , the number N y of solutions x 
modulo p n to 

x = y mod p 

is given by 

{p"-r«/21 ify = mod p n 

P m ( X + (^f~~)) l fy=P 2m ■ V' withp\y' and 2m < n 
otherwise. 

Sublemma 25. For any odd prime power p n , the number P y of pairs (b,c) 
modulo p n satisfying 

4bc = y mod p n 



is given by 



Py 



(m + 1) • tp{p n ) if y = p m ■ y' with p\y' and m < n 
n ■ ip{p n ) + p n if y = mod p n . 



The number of solutions (a, b, c) modulo p n to (|3"Tj) is simply 

y mod p n 

Using the two sublemmas and some calculation, we arrive at (|30[) . proving 
Lemma [231 □ 
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By Lemma [231 we see that 

| det - 1 (5- 1 (/i)) ;r | <<p(m 2 )-m§- + <™ 2 lo g 



P 



3 

3 m 2 . 



prime ■C ^ 7- — -n- <C logm^, 



p<m 2 

Thus we have 

m £ |G(TOj;) r | 3 
r— ; r, < lOg 7712, 

|G(m B )| 

which proves the bound for Ce.t in the non-CM case. 
For the Koblitz constant in the CM case, we see that 
C E . prime 

For Ce, prime in the non-CM case, we similarly have 

1 

rL< mB Ti-v^) 

finishing the proof of Lemma [HI □ 

We now use the following result, which is a restatement of [9[ Theorem 3]. 

Theorem 26. Assume an affirmative answer to Question [31 Then for any 
non-CM elliptic curve E over Q we have 

\p|A B / 

iyi£/i an absolute constant. 

Note that, for E G C, we have 

Y[ p < A E < 4,4 3 + 275 2 , 
p|A E 

and thus, we have 

E is not a Serre curve E is not a Serre curve 

We finally use the following result of [ID] , which in our situation may be stated 
as follows: 

Theorem 27. There is a 7 > so that 

l <<; |C|log^ (min{A,i3}) 
Etc y/mm{A,B} ' 

E is not a Serre curve 

with an absolute implied constant. 

This implies (|29|) , finishing the proof of Theorem [6[ 
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